Opera 9 (long href) Remote Denial of Service Exploit

Hannibal · June 21, 2006

<!--

Opera 9 DoS by Critical Security, Advisory #009

We are: N9, bigb0u, cybergoth, iglOo, mircia, Povilas

Shouts to Lithuanian girlz! and our friends ;]

Product: Opera 9 (8.x is immune to this)

Vulnerability type: Out-of-bounds memory access via specially crafted HTML file

Risk: moderated

Attack type: Remote

Details:

Vulnerability can be exploited by using a large value in a href tag to create an out-of-bounds memory access.

Solution:

Currently none.

Proof Of Concept DoS exploit:

-->

<html>

<body>

</body>

</html>

eddie47 · June 21, 2006

:o

Icarius · June 22, 2006

<div class='quotetop'>QUOTE("Shocker")</div>

<div class='quotetop'>QUOTE("eddie47")

:o :o

Nu inteleg care e rostul acestui post... dar trecem cu vederea.

Dap... am instalat Opera 9, am testat `vulnerabilitatea` respectiva si iata ce a iesit:

[/quote:879b24c575]

nici eu nu inteleg rostul postului tau. atata timp cat nu se vede nici o imagine

nos · June 22, 2006

nici eu nu inteleg

Recommended Posts